Cascade integration removal to every member and stop serving orphaned rows

[RhysSullivan]

Removing an integration only deleted the remover's own connections and tools. Other members' rows under the removed slug survived as orphans: gone from the catalog, but still returned by tools.list / connections.list, still invokable, and still a valid oauth.start target that failed only at the mint with Integration not found.

• integrations.remove now cascades through a delete-only, tenant-reach handle so every subject's connections, tools, and definitions under the slug are dropped in the same transaction. The catalog row is deleted first through the bound handle, so a read-only platform view is refused before the cascade.
• tools.list and connections.list only serve rows whose integration is in the catalog.
• Invoking an orphaned tool fails with IntegrationNotFoundError instead of running with no config.
• oauth.start refuses an unknown integration before creating a session.

Existing orphan rows in production still need a one-off cleanup.

🤖 Generated with Claude Code

[github-actions]

Cloudflare preview

Torn down — the PR is closed.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	a946394	Commit Preview URL Branch Preview URL	Sep 14 2026, 06:01 PM

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@1991

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@1991

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@1991

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@1991

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@1991

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@1991

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@1991

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@1991

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@1991

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@1991

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@1991

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@1991

executor

npm i https://pkg.pr.new/executor@1991

commit: a946394

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	a946394	Sep 14 2026, 06:02 PM